Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-24052	Modificada	Crítica (9.8)	0.73%	—	Connectize Ac21000 G6 Firmware	4/12/2023	17/6/2026	An issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via the change password functionality as it does not prompt for the current password.
CVE-2023-24051	Modificada	Crítica (9.8)	0.73%	—	Connectize Ac21000 G6 Firmware	4/12/2023	17/6/2026	A client side rate limit issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via brute force style attacks.
CVE-2023-24050	Modificada	Media (5.4)	0.43%	—	Connectize Ac21000 G6 Firmware	4/12/2023	17/6/2026	Cross Site Scripting (XSS) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code via crafted string when setting the Wi-Fi password in the admin panel.
CVE-2023-24049	Modificada	Crítica (9.8)	0.73%	—	Connectize Ac21000 G6 Firmware	4/12/2023	17/6/2026	An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges on the device via poor credential management.
CVE-2023-24048	Modificada	Alta (8.8)	0.35%	—	Connectize Ac21000 G6 Firmware	4/12/2023	17/6/2026	Cross Site Request Forgery (CSRF) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via crafted GET request to /man_password.htm.
CVE-2023-24047	Modificada	Media (6.8)	0.37%	—	Connectize Ac21000 G6 Firmware	4/12/2023	17/6/2026	An Insecure Credential Management issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via use of weak hashing algorithm.
CVE-2023-24046	Modificada	Media (6.8)	0.62%	—	Connectize Ac21000 G6 Firmware	4/12/2023	17/6/2026	An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary commands via use of a crafted string in the ping utility.